Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1t3ORq-00CJct-7Z for pgsql-committers@arkaria.postgresql.org; Tue, 22 Oct 2024 23:37:58 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1t3ORo-004GOv-EO for pgsql-committers@arkaria.postgresql.org; Tue, 22 Oct 2024 23:37:56 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1t3OPt-004CmT-08 for pgsql-committers@lists.postgresql.org; Tue, 22 Oct 2024 23:35:57 +0000 Received: from mahout.postgresql.org ([2001:4800:3e1:1::227]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1t3OPq-002T4B-F8 for pgsql-committers@lists.postgresql.org; Tue, 22 Oct 2024 23:35:56 +0000 Received: from gemulon.postgresql.org ([72.32.157.198]) by mahout.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1t3OPn-0075cb-J9 for pgsql-committers@lists.postgresql.org; Tue, 22 Oct 2024 23:35:52 +0000 Received: from localhost ([127.0.0.1] helo=gemulon.postgresql.org) by gemulon.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1t3OPn-001ySs-RR for pgsql-committers@lists.postgresql.org; Tue, 22 Oct 2024 23:35:51 +0000 Content-Type: multipart/mixed; boundary="===============4257192943576364300==" MIME-Version: 1.0 From: Michael Paquier To: pgsql-committers@lists.postgresql.org Subject: pgsql: ecpg: Fix out-of-bound read in DecodeDateTime() X-Auto-Response-Suppress: All Auto-Submitted: auto-generated Message-Id: Date: Tue, 22 Oct 2024 23:35:51 +0000 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --===============4257192943576364300== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 ZWNwZzogRml4IG91dC1vZi1ib3VuZCByZWFkIGluIERlY29kZURhdGVUaW1lKCkKCkl0IHdhcyBw b3NzaWJsZSBmb3IgdGhlIGNvZGUgdG8gcmVhZCBvdXQtb2YtYm91bmQgZGF0YSBmcm9tIHRoZQoi ZGF5X3RhYiIgdGFibGUgd2l0aCBzb21lIGNyYWZ0ZWQgaW5wdXQgZGF0YS4gIExldCdzIHRyZWF0 IHRoZXNlIGFzCmludmFsaWQgaW5wdXQgYXMgdGhlIG1vbnRoIG51bWJlciBpcyBpbmNvcnJlY3Qu CgpBIHRlc3QgaXMgYWRkZWQgdG8gdGVzdCB0aGlzIGNhc2Ugd2l0aCBhIGNoZWNrIG9uIHRoZSBl cnJubyByZXR1cm5lZCBieQp0aGUgZGVjb2Rpbmcgcm91dGluZS4gIEEgdGVzdCBjbG9zZSB0byB0 aGUgbmV3IG9uZSBhZGRlZCBpbiB0aGlzIGNvbW1pdAp3YXMgdGVzdGluZyBmb3IgYSBmYWlsdXJl LCBidXQgZGlkIG5vdCBsb29rIGF0IHRoZSBlcnJubyBnZW5lcmF0ZWQsIHNvCmxldCdzIHVzZSB0 aGlzIGNvbW1pdCB0byBhbHNvIGNoYW5nZSBpdCwgYWRkaW5nIGEgY2hlY2sgb24gdGhlIGVycm5v CnJldHVybmVkIGJ5IERlY29kZURhdGVUaW1lKCkuCgpMaWtlIHRoZSBvdGhlciB0ZXN0IHNjcmlw dHMsIGR0X3Rlc3Qgc2hvdWxkIGxpa2VseSBiZSBleHBhbmRlZCB0bwppbmNsdWRlIG1vcmUgY2hl Y2tzIGJhc2VkIG9uIHRoZSBlcnJub3MgZ2VuZXJhdGVkIGluIHRoZXNlIGNvZGUgcGF0aHMuClRo aXMgaXMgbGVmdCBhcyBmdXR1cmUgd29yay4KClRoaXMgaXNzdWUgZXhpc3RzIHNpbmNlIDJlNmY5 NzU2MGE4Mywgc28gYmFja3BhdGNoIGFsbCB0aGUgd2F5IGRvd24uCgpSZXBvcnRlZC1ieTogUGF2 ZWwgTmVrcmFzb3YKQXV0aG9yOiBCcnVjZSBNb21qaWFuLCBQYXZlbCBOZWtyYXNvdgpEaXNjdXNz aW9uOiBodHRwczovL3Bvc3Rnci5lcy9tLzE4NjE0LTZiYmUwMDExNzM1MjMwOWVAcG9zdGdyZXNx bC5vcmcKQmFja3BhdGNoLXRocm91Z2g6IDEyCgpCcmFuY2gKLS0tLS0tClJFTF8xM19TVEFCTEUK CkRldGFpbHMKLS0tLS0tLQpodHRwczovL2dpdC5wb3N0Z3Jlc3FsLm9yZy9wZy9jb21taXRkaWZm L2ZjYWZiYWFkZjdlNTA3NzA4ZDcyNTcyODJlMWRkY2VlMWNjNGM1ZWIKCk1vZGlmaWVkIEZpbGVz Ci0tLS0tLS0tLS0tLS0tCnNyYy9pbnRlcmZhY2VzL2VjcGcvcGd0eXBlc2xpYi9kdF9jb21tb24u YyAgICAgICAgIHwgIDYgKy0KLi4uL2VjcGcvdGVzdC9leHBlY3RlZC9wZ3R5cGVzbGliLWR0X3Rl c3QuYyAgICAgICAgfCA3NiArKysrKysrKysrKysrKystLS0tLS0tCi4uLi9lY3BnL3Rlc3QvZXhw ZWN0ZWQvcGd0eXBlc2xpYi1kdF90ZXN0LnN0ZGVyciAgIHwgNDIgKysrKysrLS0tLS0tCi4uLi9l Y3BnL3Rlc3QvZXhwZWN0ZWQvcGd0eXBlc2xpYi1kdF90ZXN0LnN0ZG91dCAgIHwgIDMgKy0Kc3Jj L2ludGVyZmFjZXMvZWNwZy90ZXN0L3BndHlwZXNsaWIvZHRfdGVzdC5wZ2MgICAgfCAzMCArKysr KysrKysKNSBmaWxlcyBjaGFuZ2VkLCAxMDkgaW5zZXJ0aW9ucygrKSwgNDggZGVsZXRpb25zKC0p Cgo= --===============4257192943576364300==--